XiphosResearch/exploits

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1575 stars · 583 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of miscellaneous proof-of-concept exploit scripts written by Xiphos Research for security testing purposes, covering CVEs across web applications, CMS platforms, routers, and embedded devices. Each exploit is a standalone Python (and occasionally other-language) script targeting a specific disclosed vulnerability such as remote code execution, shell upload, or SQL injection.

Use cases

• verify a CVE is exploitable on my own systems during a pentest
• find a proof-of-concept exploit for a known remote code execution vulnerability
• test whether a Joomla or WordPress instance is vulnerable to a published CVE
• learn how real-world exploit code is written
• reproduce a disclosed vulnerability in a lab environment
• get a reliable alternative to sketchy public exploit code for an old bug

When to choose

• you need a quick, standalone PoC script for a specific CVE rather than a full exploitation framework
• you are doing authorized penetration testing or vulnerability research and want reference exploit implementations
• you want readable Python exploit code instead of Metasploit modules
• you are studying exploit development techniques across web apps, CMSes, and embedded devices

When to avoid

• you need a maintained, comprehensive exploitation framework with payload handling and post-exploitation - use Metasploit instead
• you expect ongoing updates, new exploits, or support - the collection is sporadic and many entries target very old software
• you need code with a clear license - the repository has no top-level license and defers to individual exploit files
• you are looking for a vulnerability scanner or automated assessment tool rather than targeted exploit scripts

Facets

cli-tool · maturity maintenance

penetration-testing vulnerability-scanning security security penetration-testing developer-tools python windows cli exploits proof-of-concept rce cve red-team vulnerability-research web-exploitation router-exploits wordpress-exploits local-privilege-escalation linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="XiphosResearch/exploits")